Job Description
Role: Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS
Remote - Canada
Required Skills
Networking & SD-WAN
* Must know Palo Alto Prisma SD-WAN (ION) - on prime and AWS Strata Cloud Manager (SCM)
* Prisma Access
* BGP
* OSPF
* Static Routing
* ECMP
* IPSec VPN
* GRE Tunnels
* SD-WAN High Availability (HA)
* MPLS
* DIA
* Broadband Connectivity
* Traffic Engineering and Application-Aware Routing
### Cloud
* AWS VPC
* Transit Gateway
* Direct Connect
* Route Tables
* Security Groups
* NACLs
* AWS Networking Design
* Hybrid Cloud Connectivity
### Security
* Palo Alto NGFW
* Zero Trust Architecture
* SASE/SSE
* Segmentation and Security Policies
* Identity and Access Management
## Roles & Responsibilities
* Design end-to-end Palo Alto Prisma SD-WAN architecture for AWS, branch locations, data centers, and cloud environments.
* Develop HLD and LLD documentation for SD-WAN deployments.
* Design AWS-hosted ION Virtual Appliance architecture including HA clusters and multi-region resiliency.
* Define routing strategies using BGP, static routes, route redistribution, and cloud connectivity models.
* Deploy and onboard Prisma SD-WAN ION Virtual Appliances in AWS.
* Integrate AWS VPCs, Transit Gateway, and Direct Connect with Prisma SD-WAN fabric.
* Configure cloud-to-branch and branch-to-cloud connectivity.
* Design secure connectivity for applications hosted in AWS.
### SD-WAN Implementation
* Configure ION devices, sites, WAN circuits, and VPN fabrics.
* Implement application-aware policies, QoS, and path selection.
* Configure WAN overlays and service links.
* Execute greenfield and brownfield migrations.
* Design active/active and active/standby ION HA clusters.
* Plan failover, redundancy, and disaster recovery scenarios.
* Validate AWS availability zone resilience and WAN failover mechanisms.
### Integrate Prisma Access and Palo Alto SD-WAN & NGFW
* Implement segmentation, secure zones, and security policies.
* Ensure compliance with enterprise security standards.
* Lead migration from traditional WAN or third-party SD-WAN solutions to Prisma SD-WAN.
* Execute cloud migration and data center exit initiatives.
* Perform pilot deployments and production cutovers.
* Diagnose routing, tunnel, and application performance issues.
* Work with Palo Alto TAC for critical incidents and platform bugs.
* Optimize application experience and network performance.
* Provide L3/L4 engineering support.
* Prepare HLD, LLD, MOP, migration runbooks, rollback plans, and SOPs.
* Participate in architecture reviews and customer workshops.
* Present technical solutions to customers and stakeholders.
## Mandatory Certifications
* Palo Alto PCNSA / PCNSE
* Palo Alto Prisma SD-WAN Certification (Preferred)
Network Security Architect - Palo Alto Prisma SD-WAN (ION), AWS, PCNSA / PCNSE • Quebec City, QC, ca
Transform global security architecture as a Strategic Information Security Architect.Spearhead cloud migration security strategies while ensuring systems are secure and compliant.This pivotal role ... Show more
Get AI-powered advice on this job and more exclusive features.This range is provided by Pave Talent.Your actual pay will be based on your skills and experience — talk with your recruiter to learn m... Show more
A leading software development firm is seeking a Principal Engineer for Software Supply Chain Security.In this role, you will lead the strategy for securing software delivery on the platform.Respon... Show more
A technology company in Canada is seeking a Staff Software Engineer specializing in Security to lead and mentor engineers within the Security & Privacy team.The successful candidate will drive appl... Show more
A leading technology firm is seeking a Presales Engineer to join their team.This role offers the chance to work remotely from anywhere in Canada and requires expertise in network and security techn... Show more
Ting Internet is a leading fiber Internet provider in the United States, delivering future-proof internet in over a dozen Ting Towns across the country.As part of Tucows (NASDAQ:TCX, TSX:TC), Ting ... Show more
A customer experience solutions provider based in Canada is seeking a Cybersecurity Consultant to lead strategic AI security initiatives.The ideal candidate will have deep expertise in the Microsof... Show more
Join Palo Alto Networks as a Principal Consultant in Zero Trust Advisory.Your expertise will guide clients through comprehensive cybersecurity transformations with a focus on Zero Trust architectur... Show more
A cybersecurity technology firm is seeking a Technical Customer Success Manager in Canada to drive customer engagement and ensure effective deployment of their AI-driven automation platform.Candida... Show more
Our client in the Fintech space is seeking a Lead Architect to evolve its core technology architecture across cloud infrastructure, distributed systems, data platforms, and AI-enabled systems.Defin... Show more
We are hiring an experienced security Architect who is responsible for designing and implementing security within our architecture.This role involves working closely with cross-functional teams (en... Show more
Get AI-powered advice on this job and more exclusive features.Direct message the job poster from HCLTech.Location: Remote (Anywhere in Canada).This role will involve the RFP/RFI process as well as ... Show more
A leading AI research company in Montreal is seeking a Senior Security Operations Engineer to enhance its cloud security efforts.You will manage security protocols, respond to incidents, and work o... Show more
You will evaluate hybrid on‑premise and cloud infrastructure components, identify gaps in operational maturity, and provide insights that strengthen resilience, stability, and recoverability.What Y... Show more
Talent Acquisition Leader | Hiring Cloud Professionals Globally.Cloud is one of the fastest-growing (INC 5000, CRN) Cloud & SDx solution and services companies supporting enterprise customers on a ... Show more
A leading IT solutions provider is seeking an experienced Enterprise Z-Security Architect for a fully remote position.The role involves mainframe security operations, support, and on-call duties, r... Show more
A leading technology firm in Canada is seeking a passionate Security & DevOps Engineer to enhance its cloud environments and ensure high security across its global IoT platform.You'll manage applic... Show more
We are seeking a security engineer to build the firm’s next generation Policy Based Access Control (PBAC) solution.This role will reside within the firm’s Cyber organization within the Identity & A... Show more
A leading cloud platform company is seeking a talented individual for a full-stack security role.In this position, you will own the security lifecycle, implement monitoring systems, and directly im... Show more
An established industry player is seeking a Principal Consultant specializing in Enterprise Security.This role focuses on assisting clients in securing their digital environments and fostering trus... Show more
